Search Results (3842 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-117991 1 Mozilla 1 Firefox 2026-10-27 N/A
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117992 1 Mozilla 1 Firefox 2026-10-27 N/A
Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117994 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118004 1 Mozilla 1 Firefox 2026-10-27 N/A
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117946 1 Mozilla 1 Firefox 2026-10-27 N/A
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117950 1 Mozilla 1 Firefox 2026-10-27 N/A
Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117956 1 Mozilla 1 Firefox 2026-10-27 N/A
Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117989 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117998 1 Mozilla 1 Firefox 2026-10-27 N/A
Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118000 1 Mozilla 1 Firefox 2026-10-27 N/A
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118005 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118010 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118019 1 Mozilla 1 Firefox 2026-10-27 6.1 Medium
Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118020 1 Mozilla 1 Firefox 2026-10-27 6.1 Medium
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118023 1 Mozilla 1 Firefox 2026-10-27 6.1 Medium
Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-117932 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117947 1 Mozilla 1 Firefox 2026-10-27 N/A
Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117958 1 Mozilla 1 Firefox 2026-10-27 N/A
Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117966 1 Mozilla 1 Firefox 2026-10-27 N/A
Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117967 1 Mozilla 1 Firefox 2026-10-27 N/A
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.